Microsoft announced it would issue three updates for Windows, three for its Office productivity suite, one that affects both Windows and Office, and another that impacts both Windows and the Visual Studio development platform.
Microsoft said Thursday that it will begin 2007's security update season with a bang by releasing eight bulletins next week to patch problems in Windows, Office, and Visual Studio.
In the advance notification posted Thursday, Microsoft announced it would issue three updates for Windows, three for its Office productivity suite, one that affects both Windows and Office, and another that impacts both Windows and the Visual Studio development platform. At least two of the updates will be labeled "critical," Microsoft's highest warning.
As is its practice, Microsoft did not disclose details of the updates, but only offered clues about what it plans to fix. Some hints, however, can be gleaned from third-party security vendors that track zero-day, or unpatched, vulnerabilities.
According to eEye Digital Security's Zero-Day Tracker, three bugs in Microsoft Word and one in PowerPoint remain unpatched, while two more in Windows and another in Internet Explorer need fixing. One of the Windows zero-days was acknowledged by Microsoft only on Dec. 22, and affects all supported editions of Windows, including the not-yet-released-to-retail Windows Vista. It's possible that a fix for this MessageBox bug may be among the updates released Jan. 9.
A rival list of missing patches kept by the SANS Institute's Internet Storm Center organization shows 10 Microsoft bugs outstanding.
The updates will be available for manual download from the Microsoft Web site Tuesday at about 10 a.m. PDT. As usual, automatic updates to users' computers will begin shortly after that.
[Interop ITX 2017] State Of DevOps ReportThe DevOps movement brings application development and infrastructure operations together to increase efficiency and deploy applications more quickly. But embracing DevOps means making significant cultural, organizational, and technological changes. This research report will examine how and why IT organizations are adopting DevOps methodologies, the effects on their staff and processes, and the tools they are utilizing for the best results.
2017 State of IT ReportIn today's technology-driven world, "innovation" has become a basic expectation. IT leaders are tasked with making technical magic, improving customer experience, and boosting the bottom line -- yet often without any increase to the IT budget. How are organizations striking the balance between new initiatives and cost control? Download our report to learn about the biggest challenges and how savvy IT executives are overcoming them.